
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: 0GWdPpQXv9CAJBMGGuLO9vMbwbxwz5D6a2bejWlQYxE=
Subject key identifier: EC:BA:16:18:7A:DB:04:35:54:8F:92:7A:44:CB:AA:21:84:0F:8A:33
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 2873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 2803
Signing time: Tue 22 Sep 2026 15:36:10 +0000
Manifest this update: Tue 22 Sep 2026 15:36:10 +0000
Manifest next update: Tue 29 Sep 2026 15:36:10 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: CtXpYlg6EFU81GrfUlt+EmRyzuRGPPUKPT3w+svHBlE=)
2: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: 7d89IoO7oSE4BWIA1+3nLNGX3bTaRyu/ngtSyVYUEVo=)
3: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
4: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10355 (0x2873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Sep 22 15:36:10 2026 GMT
Not After : Sep 29 15:36:10 2026 GMT
Subject: CN=6ab2a06a-20b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:30:b3:62:96:96:49:e4:f3:ba:5d:46:2d:be:
af:3e:8d:2b:37:9d:63:cd:f2:25:c1:c6:40:6f:c6:
5f:cb:87:7b:f0:9c:8d:2c:bd:97:e9:fa:5b:70:3c:
76:43:c2:48:ba:77:3f:27:1f:c4:1b:38:f2:84:7e:
b1:de:10:31:28:cc:a5:84:40:24:b7:f8:55:9c:4d:
93:70:2a:94:cb:7f:29:56:a9:00:78:72:af:eb:d8:
12:f7:3a:e0:2e:f0:dd:c9:32:20:06:4c:a9:fc:fa:
bd:d7:1d:0b:aa:dd:ce:17:e3:01:40:d8:66:7e:c5:
98:f7:f3:bb:ab:30:0f:f4:b8:e7:95:c4:7e:54:b0:
35:a5:6d:f6:50:ea:b1:5f:1d:88:04:81:da:c3:51:
2f:04:0d:44:c2:c0:1c:cf:89:95:08:7c:29:6e:91:
e5:11:dc:33:01:83:1f:ff:0d:7c:30:6d:b3:07:d8:
e2:45:67:46:73:49:01:bc:ef:7e:16:a6:3b:7b:98:
5f:9b:0d:06:1a:33:61:81:ac:36:fd:97:b0:ff:bd:
3b:c8:98:40:8a:b6:32:6c:b2:81:06:9a:26:34:de:
29:8d:c5:b1:aa:94:35:57:43:54:ad:b9:4d:e9:69:
1b:ab:52:e0:00:dc:e0:34:01:2b:69:bc:21:44:62:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:16:18:7A:DB:04:35:54:8F:92:7A:44:CB:AA:21:84:0F:8A:33
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:f7:d6:5f:47:c0:80:47:96:ac:33:54:ca:a4:b3:f5:b9:81:
5c:7d:0c:ed:64:ab:ba:db:fd:9c:d0:b6:fd:3b:a6:eb:b9:ca:
85:96:09:eb:e7:3c:26:7e:70:b3:ee:79:4b:43:35:95:6c:be:
54:3c:d5:29:4a:33:43:43:48:49:d3:5b:e2:1d:d6:8e:14:1d:
76:8b:f1:39:19:7d:30:a0:9a:0a:6a:f8:a5:c0:63:45:a1:db:
d6:ff:72:2f:e1:6c:a0:2c:27:4c:d7:71:07:d3:d4:b0:d0:50:
07:e0:73:29:f1:73:e6:f3:ee:7a:7e:7e:a1:b2:35:c2:d3:81:
d5:7c:5e:35:5b:60:f1:e0:09:3f:07:7b:93:82:c0:00:b6:f2:
14:a8:a4:4a:73:58:8a:a7:d7:37:cb:80:f7:1d:06:58:e1:aa:
86:54:2a:43:fc:3e:bc:ec:14:e2:45:31:6b:d4:8a:27:20:bf:
04:81:43:39:33:34:e3:1e:48:66:67:1d:f9:6f:31:a8:0b:a5:
b0:c9:3c:4a:7a:7f:80:bb:8d:45:f5:c3:ee:a5:fd:9c:81:9b:
f9:32:53:ee:de:88:98:9e:33:2f:74:0b:e2:05:ca:f6:e4:bd:
25:cc:e1:47:ed:a1:af:94:b6:a6:aa:10:a9:ab:6f:64:84:67:
b4:61:0f:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjYwOTIyMTUzNjEwWhcNMjYwOTI5MTUzNjEwWjAYMRYwFAYD
VQQDEw02YWIyYTA2YS0yMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/DCzYpaWSeTzul1GLb6vPo0rN51jzfIlwcZAb8Zfy4d78JyNLL2X6fpbcDx2
Q8JIunc/Jx/EGzjyhH6x3hAxKMylhEAkt/hVnE2TcCqUy38pVqkAeHKv69gS9zrg
LvDdyTIgBkyp/Pq91x0Lqt3OF+MBQNhmfsWY9/O7qzAP9LjnlcR+VLA1pW32UOqx
Xx2IBIHaw1EvBA1EwsAcz4mVCHwpbpHlEdwzAYMf/w18MG2zB9jiRWdGc0kBvO9+
FqY7e5hfmw0GGjNhgaw2/Zew/707yJhAirYybLKBBpomNN4pjcWxqpQ1V0NUrblN
6Wkbq1LgANzgNAErabwhRGIFVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy6Fhh6
2wQ1VI+SekTLqiGED4ozMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ
X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlPfWX0fAgEeWrDNUyqSz9bmBXH0M7WSrutv9nNC2/Tum67nKhZYJ6+c8Jn5w
s+55S0M1lWy+VDzVKUozQ0NISdNb4h3WjhQddovxORl9MKCaCmr4pcBjRaHb1v9y
L+FsoCwnTNdxB9PUsNBQB+BzKfFz5vPuen5+obI1wtOB1XxeNVtg8eAJPwd7k4LA
ALbyFKikSnNYiqfXN8uA9x0GWOGqhlQqQ/w+vOwU4kUxa9SKJyC/BIFDOTM04x5I
Zmcd+W8xqAulsMk8Snp/gLuNRfXD7qX9nIGb+TJT7t6ImJ4zL3QL4gXK9uS9Jczh
R+2hr5S2pqoQqatvZIRntGEPLQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:39 2026 by rpki-client